atxp

Fail

Audited by Socket on Jun 22, 2026

1 alert found:

Malware
MalwareHIGH
SKILL.md

The manifest describes a high-risk but potentially legitimate autonomous agent platform with funded wallet/identity and extensive paid-tool capabilities. While aligned with its stated purpose, runtime code loading, plaintext credential storage, and broad external communications create meaningful supply-chain and data-flow risks. Governance controls (per-action approvals, strict versioning, verified integrity checks, encrypted or access-controlled local storage) are essential to mitigate risk. Treat as SUSPICIOUS to HIGH risk until verifiable provenance and strict operational controls are in place.

Confidence: 95%Severity: 90%
Audit Metadata
Analyzed At
Jun 22, 2026, 09:09 PM
Package URL
pkg:socket/skills-sh/Tommy9959%2Ftommy-hardware-cn%2Fatxp%2F@2adf431f11857cab6b44e6c0d45882adc466e44b49055184f496a1b650d931f4
Security Audit — socket — atxp